Vulnerabilities published in 2020
21,460 vulnerabilities were published in 2020: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 198 of 215.
- CVE-2020-10649 Code injection in asus:device activation
- CVE-2020-10648 Security feature bypass in denx:u-boot
- CVE-2020-10646 Memory corruption in Fuji Electric V-Server Lite all versions prior to 4.0.9.0
- CVE-2020-10644 Deserialization in Ignition 8 Gateway
- CVE-2020-10643 OSIsoft PI System
- CVE-2020-10642 Privilege escalation in Rockwell Automation RSLinx Classic versions 4.1.00 and prior
- CVE-2020-10641 Missing authorization in Ignition 8 Gateway
- CVE-2020-10640 ICSA-20-140-02 Emerson OpenEnterprise
- CVE-2020-1064 MSHTML Engine Remote Code Execution Vulnerability
- CVE-2020-10639 Memory corruption in Eaton HMiSoft VU3 (HMIVU3 runtime not impacted)
- CVE-2020-10638 Memory corruption in Advantech WebAccess Node
- CVE-2020-10637 Memory corruption in Eaton HMiSoft VU3 (HMIVU3 runtime not impacted)
- CVE-2020-10636 ICSA-20-140-02 Emerson OpenEnterprise
- CVE-2020-10635 ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication Channel
- CVE-2020-10634 Path traversal in SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
- CVE-2020-10633 Cross-site scripting in eWON Flexy and Cosy
- CVE-2020-10632 ICSA-20-140-02 Emerson OpenEnterprise
- CVE-2020-10631 Path traversal in WebAccess/NMS
- CVE-2020-10630 Cross-site scripting in SAE IT-systems FW-50 Remote Telemetry Unit (RTU)
- CVE-2020-1063 Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
- CVE-2020-10629 XML external entity in WebAccess/NMS
- CVE-2020-10628 Information disclosure in ControlEdge PLC
- CVE-2020-10627 Auth bypass in Omnipod Insulin Management System
- CVE-2020-10626 Other in Fazecast jSerialComm, Version 2.2.2 and prior
- CVE-2020-10625 Auth bypass in WebAccess/NMS
- CVE-2020-10624 Information disclosure in ControlEdge PLC
- CVE-2020-10623 SQL injection in WebAccess/NMS
- CVE-2020-10622 Other in LCDS LAquis SCADA Versions 4.3.1 and prior
- CVE-2020-10621 File upload in WebAccess/NMS
- CVE-2020-10620 Missing authorization in Opto 22 SoftPAC Project
- CVE-2020-1062 Internet Explorer Memory Corruption Vulnerability
- CVE-2020-10619 Path traversal in WebAccess/NMS
- CVE-2020-10618 Information disclosure in LCDS LAquis SCADA Versions 4.3.1 and prior
- CVE-2020-10617 SQL injection in WebAccess/NMS
- CVE-2020-10616 Other in Opto 22 SoftPAC Project
- CVE-2020-10615 Memory corruption in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122
- CVE-2020-10614 Cross-site scripting in OSIsoft PI System multiple products and versions
- CVE-2020-10613 Memory corruption in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122
- CVE-2020-10612 Missing authorization in Opto 22 SoftPAC Project
- CVE-2020-10611 Memory corruption in Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122
- CVE-2020-10610 Privilege escalation in OSIsoft PI System multiple products and versions
- CVE-2020-1061 Microsoft Script Runtime Remote Code Execution Vulnerability
- CVE-2020-10609 Information disclosure in CIM 500
- CVE-2020-10608 Security feature bypass in OSIsoft PI System multiple products and versions
- CVE-2020-10607 Memory corruption in Advantech WebAccess
- CVE-2020-10606 Misconfiguration in OSIsoft PI System multiple products and versions
- CVE-2020-10605 Missing authorization in CIM 500
- CVE-2020-10604 Denial of service in OSIsoft PI System multiple products and versions
- CVE-2020-10603 Command injection in WebAccess/NMS
- CVE-2020-10602 Race condition in OSIsoft PI System multiple products and versions
- CVE-2020-10601 Weak cryptography in VBASE Editor
- CVE-2020-10600 OSIsoft PI System
- CVE-2020-1060 VBScript Remote Code Execution Vulnerability
- CVE-2020-10599 Memory corruption in VBASE Editor
- CVE-2020-10598 Security feature bypass in Pyxis Anesthesia (PAS) ES System
- CVE-2020-10597 Memory corruption in Delta Industrial Automation DOPSoft
- CVE-2020-10596 Cross-site Scripting in OpenCart
- CVE-2020-10595 Memory corruption in debian:debian linux
- CVE-2020-10594 Django Rest Framework jwt allows obtaining new token from notionally invalidated token
- CVE-2020-10593 Denial of service in opensuse:backports sle
- CVE-2020-10592 Denial of service in opensuse:backports
- CVE-2020-10591 Exposure of Sensitive Information to an Unauthorized Actor in Concord
- CVE-2020-10590 Information disclosure in replicated:replicated classic
- CVE-2020-1059 Microsoft Edge Spoofing Vulnerability
- CVE-2020-10589 Privilege escalation in v2rayl project:v2rayl
- CVE-2020-10588 Privilege escalation in v2rayl project:v2rayl
- CVE-2020-10587 Privilege escalation in antixlinux:antix linux
- CVE-2020-10584 Path traversal in invigo:automatic device management
- CVE-2020-10583 Command injection in invigo:automatic device management
- CVE-2020-10582 SQL injection in invigo:automatic device management
- CVE-2020-10581 Auth bypass in invigo:automatic device management
- CVE-2020-10580 Command injection in invigo:automatic device management
- CVE-2020-1058 VBScript Remote Code Execution Vulnerability
- CVE-2020-10579 Path traversal in invigo:automatic device management
- CVE-2020-10578 Path traversal in q-cms:qcms
- CVE-2020-10577 Race condition in meetecho:janus
- CVE-2020-10576 Race condition in meetecho:janus
- CVE-2020-10575 Race condition in meetecho:janus
- CVE-2020-10574 Other in meetecho:janus
- CVE-2020-10573 Race condition in meetecho:janus
- CVE-2020-10571 Potential buffer overflow in psd-tools
- CVE-2020-10570 Security feature bypass in telegram:telegram
- CVE-2020-1057 Scripting Engine Memory Corruption Vulnerability
- CVE-2020-10569 File upload in sysaid:on-premise
- CVE-2020-10568 Cross-site request forgery in onthegosystems:sitepress-multilingual-cms
- CVE-2020-10567 File upload in tecrail:responsive filemanager
- CVE-2020-10566 Memory corruption in freebsd:freebsd
- CVE-2020-10565 Memory corruption in freebsd:freebsd
- CVE-2020-10564 Path traversal in iptanus:wordpress file upload
- CVE-2020-10563 SQL injection in devome:grr
- CVE-2020-10562 File upload in devome:grr
- CVE-2020-10561 Command injection in mi:mijia inkjet printer firmware
- CVE-2020-10560 Weak cryptography in opensource-socialnetwork:open source social network
- CVE-2020-1056 Microsoft Edge Elevation of Privilege Vulnerability
- CVE-2020-10558 Denial of service in tesla:model 3 web interface
- CVE-2020-10557 File upload in atutor:acontent
- CVE-2020-10554 Weak cryptography in psyprax:psyprax
- CVE-2020-10553 Misconfiguration in psyprax:psyprax
- CVE-2020-10552 Hardcoded credentials in psyprax:psyprax
- CVE-2020-10551 Misconfiguration in tencent:qqbrowser